all groups > iis security > may 2005 >
You're in the

iis security

group:

Windows 2003 Server and IIS 6.0: Domain users can't access my web site :(



Windows 2003 Server and IIS 6.0: Domain users can't access my web site :( Mark Smith
5/26/2005 12:00:00 AM
iis security: Hello all.
I have Windows 2003 Server who work like Domain Controler.
On a DC I use IIS 6.0 because I have internel web site. This Web
site must access from domain users via internal network and therefore
I set on IIS option "Integrated Windows authentication" for better Security.
Actually problem is that when on Workstations is Logon like a
Domain User, IIS Return error: HTTP Error 401.1 - Unauthorized.
If I Logon like a Domain Admin I have permission and web site work
perfect.
Thanks for help in advance.

Re: Windows 2003 Server and IIS 6.0: Domain users can't access my web site :( Mark Smith
5/26/2005 12:00:00 AM
[quoted text, click to view]

NTFS permissions for Domain Users is:

Read & Execute,
List Folders Contents,
Read

But I give Full Permissions of Domain users on NTFS and then Web site
again is not permited for domain users.

Re: Windows 2003 Server and IIS 6.0: Domain users can't access my web site :( Bernard
5/27/2005 12:00:00 AM
Mm.. post the log entries of those login requests. also you can try authdiag
(microsoft.com) to troubleshoot.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

Re: Windows 2003 Server and IIS 6.0: Domain users can't access my web site :( Mark Smith
5/28/2005 12:00:00 AM
Sorry for a late....

this is log ex050528.log file:

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2005-05-28 08:15:50
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port
cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
2005-05-28 08:36:24 192.168.1.13 GET /Clients/ - 80 - 192.168.1.14
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 500 0
2147746304
2005-05-28 08:36:45 192.168.1.13 GET /Clients/ - 80 - 192.168.1.14
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 2
2148074254
2005-05-28 08:36:45 192.168.1.13 GET /Clients/ - 80 - 192.168.1.14
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 1
0

In this moment I connect unsuccessful to IIS-WWW like a Domain User.

p.s. If I find any decision, I will public it in this topic.

[quoted text, click to view]

Re: Windows 2003 Server and IIS 6.0: Domain users can't access my web site :( Bernard Cheah [MVP]
5/30/2005 12:00:00 AM
Where the rest of the log file ? this is normal behavior as IE is connecting
as anonymous user first then act upon the auth header replied by IIS. 401.2
and 401.1 is just part of th process.

Though 500 error is something that not normal.

--
Regards,
Bernard Cheah
http://www.microsoft.com/iis/
http://www.iiswebcastseries.com/
http://www.msmvps.com/bernard/


[quoted text, click to view]

AddThis Social Bookmark Button